Arista NG Firewall User-Agent Cross-Site Scripting Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in Arista NG Firewall. The issue arises from improper validation of user-supplied data in the User-Agent HTTP header, allowing for the injection of arbitrary scripts. Exploitation of this vulnerability requires minimal user interaction and enables attackers to execute code with root privileges on the affected system.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected system, with the executed code running in the context of the root user.